CSRSS.EXE...how can I get rid of it???

[Bruce]

Jim,
I am getting hit with these pop-ups also. Is there a way
to turn them off? Can they be blocked without spending
the $30 so download the Pop-Up blocker software? Does
Microsoft have a fix? Thanks,

Bruce

>-----Original Message-----
>Just recently, I've noticed that when I come online, I've
>been getting a lot of pop-ups. On one instance, I
>brought up my task manager and clicked on to take me to
>the process that was making the pop-ups. It's something
>called csrss.exe, so I tried to end process and I was
>told that this is a critical process and that the task
>manager cannot end that process. No problem I thought,
>I'll just do a search for it and then delete it. I found
>it, but when I tried to delete it I got an acess is
>denied error. That's when I screamed in frustration. I
>went over it's properties and it appears that it was
>created by the Microsoft Cooperation. I have MSN and I'm
>more than willing to go to another service if no one can
>help me to get rid of this. A pop-up program is not
>needed to go online, so there must be a way of getting
>rid of it. Thank you!
>.
>

[Torgeir Bakken (MVP)]

Bruce wrote:

> Jim,
> I am getting hit with these pop-ups also. Is there a way
> to turn them off? Can they be blocked without spending
> the $30 so download the Pop-Up blocker software? Does
> Microsoft have a fix? Thanks,

Hi

You can disable the Messenger service, but by doing only that, the
computer will STILL be open to the Internet and be pretty unsecured. The
Messenger Service messages is only the symptom, and not the cause.

You should follow the recommendations in the MS Knowledge Base article 330904:

Messenger Service Window That Contains an Internet Advertisement Appears
http://support.microsoft.com/?id=330904

Here is the most important part of it:

"For this reason, Microsoft recommends that you install a firewall and
configure it to block NetBIOS traffic instead of merely just turning off
the Messenger service."

That means blocking internet access to ports 135, 137-139 and 445 with a SW or
HW firewall.

http://securityadmin.info/faq.htm#firewall

Some general information about popups and how to stop it:
http://securityadmin.info/faq.htm#pop-ups



--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter